Security
We provide a business-critical component of the IT infrastructure to our customers. We work hard every day to earn and maintain that trust.
Regular Audits and Penetration Tests
We regularly conduct penetration tests (pentests) on our IT infrastructure. We also collaborate with various specialized parties to perform comprehensive audits. Tests and audits have been conducted by renowned organizations, including: Madison Gurkha, Fox-IT, KPMG, Ernst & Young, Insite Security, Sogeti (Security TAK), Ordina Security & Risk Management, and Deloitte Risk Services BV.
Certified for Information Security
We are ISO 27001:2022-certified for information security. Our certified scope is defined as: “Hosting, maintaining, supporting and developing Identity Services required for the authentication, authorization and identification of internet users”.
Secure Software Development in collaboration with iComply
In partnership with iComply and the Secure Software Foundation, we contribute to the establishment and ongoing development of the Secure Software Development framework. By implementing these standards, we ensure a high level of security awareness throughout our software development department.
Daily Network Scanning
We utilize state-of-the-art software to secure and maintain our infrastructure. As part of our proactive measures, we perform daily external scans of our internet-facing infrastructure. Additionally, a scan of our internal network is performed weekly. These measures ensure we remain protected against known security vulnerabilities and exploits.
Responsible Disclosure Policy
At We-ID, the security of our systems, network, and products is our top priority. Despite our rigorous focus on security, a vulnerability may occasionally be discovered. If you identify a security flaw, we encourage you to report it to us as soon as possible so we can take immediate action.

